$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/bc5a6312-4e10-307a-b0b2-ce8e3bba1f05.roa File: bc5a6312-4e10-307a-b0b2-ce8e3bba1f05.roa (raw, json) Hash identifier: /Nab7Z6t9/1KdkrOIrisY4fSLpWfgp2G9x7vat0knjM= Subject key identifier: 78:21:A7:5E:DC:2C:38:9A:25:7C:F3:14:F3:FB:D0:7C:55:20:2A:06 Certificate issuer: /CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Certificate serial: 010D0C9F4328584F331D0FE45F56296A424AAD60 Authority key identifier: FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/bc5a6312-4e10-307a-b0b2-ce8e3bba1f05.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 10279 IP address blocks: 198.13.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:0f:e4:5f:56:29:6a:42:4a:ad:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f744de9-b5b8-4da8-a7f3-989871978fa6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=d68f8291-7533-4d6b-aac7-00cf551c84d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:5e:66:bd:54:27:d1:14:0d:65:9e:19:8b: d7:9c:86:d0:f6:6d:78:30:1f:4d:90:07:6c:e5:58: 3b:8f:3f:c6:e8:19:68:13:3b:a2:fa:e3:30:d9:93: a2:e3:3b:3c:fa:75:94:ef:2d:0c:42:27:fd:58:57: 13:e1:4d:25:57:e9:ed:1c:35:36:09:6b:64:05:de: b4:96:05:99:18:cc:9b:66:5a:bb:83:69:95:fe:cf: 6d:dc:3a:3d:34:cd:21:c5:c9:c9:9c:fb:5b:b8:80: f7:74:dd:c9:b0:e4:f9:9e:87:85:28:91:58:90:08: ab:6f:bf:30:c7:4c:2f:bd:99:93:3d:2e:a4:dd:aa: dd:77:b2:c6:83:15:45:60:64:0e:42:2b:68:3d:59: d6:36:f8:80:c8:0f:8e:bb:51:17:86:a9:8e:7b:7a: 47:37:d9:87:ed:94:3a:ea:c8:32:3d:c6:ef:93:99: bd:47:a2:07:ae:7f:7b:12:79:41:d8:18:c6:03:fb: b3:d8:de:47:76:10:d2:26:6d:d5:9e:09:2d:e9:24: 23:19:33:ad:7d:cb:da:45:50:09:e8:4e:ea:f1:d9: 3c:28:d6:0e:ce:b6:c6:fe:ad:f2:ad:b3:7d:32:68: b9:20:ae:f6:26:23:dd:dc:a3:b8:4d:95:19:12:cb: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:21:A7:5E:DC:2C:38:9A:25:7C:F3:14:F3:FB:D0:7C:55:20:2A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/bc5a6312-4e10-307a-b0b2-ce8e3bba1f05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6/8f744de9-b5b8-4da8-a7f3-989871978fa6.crl X509v3 Authority Key Identifier: keyid:FE:B0:78:F5:A3:E0:3A:81:A4:57:58:FB:78:30:6D:44:E3:5B:E8:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8f744de9-b5b8-4da8-a7f3-989871978fa6.cer sbgp-ipAddrBlock: critical IPv4: 198.13.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:24:b2:df:b6:ba:a3:72:7f:e8:7f:6f:c7:a2:8c:e2:4f:bc: ac:85:0a:69:9a:33:aa:6a:fc:d9:91:e0:21:71:c7:20:f0:ad: 8e:0c:56:64:13:96:5a:62:01:c8:70:24:4e:de:c6:59:0f:f4: 89:8e:a4:5d:8c:43:02:8d:cb:69:c6:08:22:6b:b6:13:ef:12: 44:c6:d6:a6:76:b8:91:72:0f:2b:c9:c9:fa:f9:16:c7:1c:0f: dc:8b:02:23:3b:eb:88:7b:42:07:1a:86:35:70:a6:ad:68:3c: bb:5c:6e:7b:1c:9f:ef:00:76:ac:61:00:d8:55:68:20:00:f0: 9a:ba:2a:ce:3b:12:c1:1d:21:49:90:d6:c6:f9:db:e8:85:88: e0:1f:b6:7f:04:89:fd:54:51:a7:37:6b:81:1b:dc:b3:27:dd: b8:c2:ac:3e:04:3d:69:a8:e1:55:54:ad:38:f2:36:df:d9:3a: 4b:54:88:aa:a8:c3:1c:69:c4:dc:1d:e8:02:d6:11:b7:e0:63: 5a:67:99:be:f4:80:4e:ae:45:dd:b4:1b:57:f3:31:59:3d:d4: cc:c3:37:42:f2:a4:59:99:fe:9e:45:a2:08:73:2b:b2:c1:65: e3:f3:3f:fa:b7:40:2d:7f:84:83:0e:ba:f7:00:6b:44:bb:ac: f7:d1:77:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHQ/kX1YpakJKrWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY3NDRkZTktYjViOC00ZGE4LWE3ZjMtOTg5ODcxOTc4 ZmE2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDY4ZjgyOTEtNzUzMy00ZDZiLWFhYzctMDBjZjU1MWM4NGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoZeZr1UJ9EUDWWeGYvXnIbQ9m14MB9NkAds 5Vg7jz/G6BloEzui+uMw2ZOi4zs8+nWU7y0MQif9WFcT4U0lV+ntHDU2CWtkBd60 lgWZGMybZlq7g2mV/s9t3Do9NM0hxcnJnPtbuID3dN3JsOT5noeFKJFYkAirb78w x0wvvZmTPS6k3ardd7LGgxVFYGQOQitoPVnWNviAyA+Ou1EXhqmOe3pHN9mH7ZQ6 6sgyPcbvk5m9R6IHrn97EnlB2BjGA/uz2N5HdhDSJm3Vngkt6SQjGTOtfcvaRVAJ 6E7q8dk8KNYOzrbG/q3yrbN9Mmi5IK72JiPd3KO4TZUZEsuSpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHghp17cLDiaJXzzFPP70HxVICoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84Zjc0 NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4NzE5NzhmYTYvYmM1YTYzMTItNGUxMC0z MDdhLWIwYjItY2U4ZTNiYmExZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGY3NDRkZTktYjViOC00ZGE4LWE3 ZjMtOTg5ODcxOTc4ZmE2LzhmNzQ0ZGU5LWI1YjgtNGRhOC1hN2YzLTk4OTg3MTk3 OGZhNi5jcmwwHwYDVR0jBBgwFoAU/rB49aPgOoGkV1j7eDBtRONb6IswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84Zjc0NGRlOS1iNWI4LTRkYTgtYTdmMy05ODk4 NzE5NzhmYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxg1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4kst+2uqNyf+h/b8eijOJPvKyFCmmaM6pq/NmR4CFxxyDwrY4MVmQT llpiAchwJE7exlkP9ImOpF2MQwKNy2nGCCJrthPvEkTG1qZ2uJFyDyvJyfr5Fscc D9yLAiM764h7QgcahjVwpq1oPLtcbnscn+8AdqxhANhVaCAA8Jq6Ks47EsEdIUmQ 1sb52+iFiOAftn8Eif1UUac3a4Eb3LMn3bjCrD4EPWmo4VVUrTjyNt/ZOktUiKqo wxxpxNwd6ALWEbfgY1pnmb70gE6uRd20G1fzMVk91MzDN0LypFmZ/p5FoghzK7LB ZePzP/q3QC1/hIMOuvcAa0S7rPfRdyk= -----END CERTIFICATE-----Generated at Sun Sep 27 23:30:25 2026 by rpki-client